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0 Method and apparatus for recording usage data of card operated devices. 



@ Method for recording usage data of a card op- 
erated device (2), such as a public telephone set or 
a vending machine, the method comprising the stor- 
age of the usage data in a storage unit (3) asso- 
ciated with the device. The usage data being stored 
in the storage unit have first been transferred from 
the device (2) to the card (1) and subsequently from 



the card (1) to the device (2). The security of the 
data transfers may be enhanced by cryptographic 
techniques. Preferably, transmission of the usage 
data from the card (1) to the storage unit (3) takes 
place during a verification procedure by means of 
which the authenticity of the card Is checked. 
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BACKGROUND OF THE INVENTION 

The invention relates to a method for recording 
usage data of a card operated device, the method 
comprising storing the usage data in a storage unit 
associated with the device. More in particular, the 
invention relates to the secure storage of cost data 
in counters of public telephone sets of the type 
where the caller pays by means of a card, such as 
a so-called chip card. The invention also relates to 
recording usage data in general and cost data in 
particular of (vending) machines where the pur- 
chaser pays by means of a card, such as vending 
machines for sweets or for soft drinks, certain 
types of parking meters and stamp vending ma- 
chines. The term "card" should in this context be 
taken as referring to any type of card (or equivalent 
of a card) which enables the user to make use of 
the device in question. 

it is known in practice to equip telephone sets 
for public use with a payment mechanism which 
settles payment by means of a card (phone card) 
such as a magnetic card or a chip card. On the 
card, a balance is stored in a magnetic strip or in a 
semiconductor memory. With each telephone con- 
versation, the balance stored on the card is lower- 
ed, for example with each metering pulse (billing 
pulse) of the telephone network or of the telephone 
set In question. Adjustment of the balance takes 
place, for a card having a semiconductor memory, 
by continually supplying to the card a pulse which 
causes a reduction of the balance, for example by 
subtracting an amount from a stored value or by 
lowering a counter content of an electronic counter. 

The number of telephone calls, the number of 
metering pulses and/or the amount of call charges 
can be recorded not only in the card, but also by a 
counter (or a different-type storage unit) associated 
with the telephone set. It is possible for such a 
counter to be present in the telephone set Itself, 
but also to be accommodated in a separate count- 
ing or recording device which is common to a 
number of telephone sets but linked to the tele- 
phone sets in question. Incidentally, a count of the 
charges is also kept in the telephone exchange to 
which the telephone set In question is connected, 
but generally for other purposes. A counter, asso- 
ciated with a telephone set, of the type mentioned 
In the above may be used, for example, for statisti- 
cal purposes or for checking card balances, but 
can also be used for settling call charges. 

Such settling of charges may be carried out for 
various reasons. Firstly, it may Involve a settling of 
charges with th commercial operator of the local- 
ity in which the telephone set in question is lo- 
cated, the commercial operator being paid part of 
the call charges. Thus it Is, for example, standard 
practice in hotels and restaurants to impose a 



surcharge for the use of the public telephone set 
present there. Secondly, a settling of charges may 
be necessary with another telephone company if 
the caller makes use of a card of a telephone 

5 company different from that to which the telephone 
in question is connected. The main instance of this 
type to come to mind is the use of foreign cards, 
where it is necessary to settle the call charges with 
the foreign telephone company in question. Thirdly, 

10 a settlement of charges can be carried out with the 
commercial operator of the telephone set itself. 

In the case of vending machines and the like, 
charges may be settled correspondingly with, for 
example, the commercial operator of the locality 

15 where the machine is placed, the agency which 
has supplied the card, and the commercial operator 
of the machine. An example of a card operated 
vending machine is described in DE-A-4.103.415 
[3]. The vending machine proposed in [3] is pro- 

20 vided with an additional card for recording operator 
revenues. 

Card operated devices are, however, subject to 
possible fraud, especially fraud by mechanical 
and/or electronic manipulation of the card or the 

25 device. It is found that telephone sets and vending 
machines are broken into with the possibility of the 
counter contents being altered. There are also in- 
cidences of card balances being increased illegally. 
Consequently, reliable and fair settling of charges 

30 is obviously no longer possible. In the abovemen- 
tioned cases of the use of a public telephone in a 
particular commercially operated locality and the 
use of a foreign card this always results in loss of 
income for the telephone company in question. 

35 In conventional public telephone sets (pay- 

phones) each metering pulse or all the call charges 
are transmitted to the counter of the telephone set 
Itself and to the card which has been inserted into 
the telephone set. The objective of this is to adjust 

40 continually, i.e. at each metering pulse, both the 
count state of the counter of the telephone set and 
the balance of the card, thus making possible a 
subsequent check of the balance of the card (and 
possible other usage data stored therein). By 

45 means of suitable manipulations with the telephone 
set it may become possible for the card to be able 
to be removed during the telephone call, so that 
the call charges are no longer debited to the card. 
Although security procedures have been proposed 

50 which continually check the presence of the card, it 
Is nevertheless not possible to guarantee that the 
charges recorded in the telephone set and further 
data keep in step at all times with the data stored 
in the card. After all, it is still possible for metering 

55 pulses (or. In the case of a card equipped with a 
microprocessor, suitable instructions) indeed to be 
transmitted to the card with the objective of lower- 
ing the balance on the card, but for these metering 
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pulses not to reach the card owing to, for example, 
a technical fault or nnanipulation. 

European patent application EP-A-0. 185.365 [4] 
discloses card operated pay phones connected to 
a central computer, the computer providing data for 5 
verifying the authenticity of the card. The credit 
balance is written in the card at the end of a 
telephone call, but there is no guarantee that the 
actual balance written is correct. 

The publication "Offentliches Kartentelefon fur io 
Wert- und Kreditkarten" [5] discloses card phones 
In which the identity of the card is checked. An 
"image" of a card is made and during a phone call 
the recording of data is checked by repeatedly 
comparing this image with metering pulses re- is 
ceived from an exchange. The identity of the image 
with the actual card can, however, not be guar- 
anteed. 

SUMMARY OF THE INVENTION 20 

An effective check of the usage data stored on 
the card, in particular of the balance stored on that 
card, can only be achieved if it is known with 
certainty which usage data are stored on the card. 25 
The object of the invention is therefore to over- 
come the abovementioned and other drawbacks of 
the prior art and to provide for reliable recording of 
usage data, in particular charge data, of card op- 
erated devices. To this end the method according 30 
to the invention comprises the steps of: temporarily 
storing first usage data in the device, transferring 
second usage data from the device to the card, the 
second usage data being derived from the first 
usage data, storing third usage data on the card, 35 
the third usage data being derived from the second 
usage data, transferring fourth usage data from the 
card to the device, the fourth usage data being 
derived from the third usage data, and storing the 
fifth usage data in a storage unit associated with 40 
the device, the fifth usage data being derived from 
the fourth usage data. In other words, according to 
the invention, the usage data are not supplied 
directly from the telephone set to the storage unit, 
but first transferred to the card (as second usage 45 
data) in order to then, i.e. immediately thereafter or 
some time later, be conveyed from the card to the 
device (as fourth usage data) and, after possible 
processing, to be stored in the storage unit. As a 
result, the storage unit stores usage data which are so 
related with certainty to the usage data recorded 
on the card, so that a reliable check of the usage 
data and thus reliable settling of the call charges is 
mad possible. The (fifth) usage data which are 
stored in the storage unit may, in this case, both be 55 
identical to the transmitted (fourth) usage data and 
be derived therefrom. Thus it is possible, for exam- 
ple, for an absolute value such as a credit recorded 



004 A1 4 



on the card to be transmitted from the card to the 
device, while in the storage unit a relative value is 
stored, such as the difference between this credit 
and a previous credit. 

In an embodiment of the invention, the first and 
fifth usage data are identical. In other words, the 
usage data temporarily stored are identical to the 
usage data which are securely recorded. This al- 
lows an easy comparison of the first and fifth usage 
data, thus providing a simple and quick verification 
of the usage data. 

In another embodiment, the fifth usage data are 
derived from the fourth usage data by means of a 
cryptographic process. This allows the usage data 
to be recorded in encrypted form, thus providing 
an enhanced security. 

In still another embodiment, the third usage 
data are derived from the second usage data by 
means of a cryptographic process. In other words, 
the usage data are registered on the card in en- 
crypted form. Subsequently, the third usage data 
may be decrypted to render the fourth usage data 
identical to the second or the fourth usage data 
may also be transmitted in encrypted form. 

It will be understood that using a cryptographic 
technique in the method according to the invention 
is optional and that the first, the second, the third, 
the fourth and the fifth usage data may be iden- 
tical. 

Advantageously, the method according to the 
invention is carried out in such a way that the 
transmission of the fourth usage data from the card 
to the storage unit takes place during a verification 
procedure by means of which the authenticity of 
the card is verified. A substantial advantage of this 
is that at the same time the reliability of the usage 
data is checked: if the authenticity of the card 
cannot be demonstrated, the usage data transmit- 
ted are unreliable and may be ignored. It is ad- 
vantageous, in that case, to record, and subse- 
quently process the fact that the usage data of the 
card in question are unreliable, so that the card 
may, for example, be rendered invalid. If the usage 
data are involved in the verification procedure itself, 
by, for example, an authenticity code being gen- 
erated on the basis of, inter alia, the usage data, a 
single data transmission from card to device may 
serve two purposes, viz. the verification of the 
authenticity and the verification of the usage data. 

Preferably, the verification procedure for each 
usage (telephone call, act of purchase) of a device 
takes place repeatedly. Thus it is achieved that a 
transmission of usage data and thus a check or 
verification of these usage data is enabled a num- 
ber of times during the usage in question of the 
device. Consequently, current data are stored and 
checked at all times. By repeating the verification 
process and thus the transmission of the call data 
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more frequently per unit of time, the reliability of 
the stored data is increased, while the disadvanta- 
geous effects of a premature removal of the card, 
i.e. a removal before usage has finished, are re- 
duced. 

The method according to the invention is pref- 
erably carried out in such a way that the verifica- 
tion procedure comprises the determination of an 
authenticity code, which determination takes place 
on the basis of, inter alia, the usage data. This 
achieves additional security of the usage data. 

Advantageously, the usage data may comprise 
a credit balance. In the case of a telephone set, the 
credit balance will be the call charge credit. It is 
possible, by means of the method according to the 
invention, to guarantee that, for example, the 
amount debited from the card is represented cor- 
rectly in (the storage unit of) the device. 

The costs of a particular transaction, the num- 
ber of times that a particular card or a particular 
device is used (the number of transactions) and 
usage data of this type are advantageously stored 
by means of at least one counter. When charges 
which are deducted on the card from a balance are 
stored, the counter may be increased by the num- 
ber of units by which the balance of the card is 
lowered. It is also possible to lower the counter by 
the number of units by which the balance of the 
card is lowered. 

It is possible, for checking the usage data, to 
always use the difference of two balances or other 
usage data (counter contents) stored at different 
times. After reading out a counter or a memory 
location of the storage unit, the data stored therein 
can be erased, so that the counter or memory 
location in question again returns to the start posi- 
tion (zero state). It may however be advantageous 
to make use of absolute counters which cannot be 
reset. This provides security against loss of data if 
read-out data have been lost, for example owing to 
a malfunction. 

A further security against loss in the case of 
malfunctions can be obtained if the storage unit, in 
addition to the current absolute value of a counter, 
also stores the absolute value of that counter dur- 
ing the most recent read-out thereof. Preferably, 
the process of reading out from the storage unit, 
i.e. the transmission of the values (usage data) 
stored in the storage unit to a downstream system, 
comprises forming the difference of the said values 
of the counter i.e. the difference of the current 
absolute counter value and the absolute value of 
that counter during the most recent read-out there- 
of. Thus it is possible at all times to read out a 
relative value, namely the difference between two 
counter contents, from the storage unit, while the 
detrimental effect of data loss during read out is 
considerably reduced. Further security of th us- 
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age data is obtained if the process of reading out 
from the storage unit comprises forming a cryp- 
togram from usage data read out. In other words, 
during read-out the stored usage data are con- 

5 verted cryptographically into a code to be transmit- 
ted to a downstream system. This code (cryp- 
togram) need not be decodable; in the downstream 
system (telephone exchange, central recording 
system) a similar code can be generated which, for 

10 the purpose of verification of the coded usage data, 
is tested for identity with the received code. 

The storage unit which, as discussed in the 
above, may comprise one or more counters is 
preferably accommodated in a secure module 

75 which is accommodated preferably detachably, in 
the telephone set in question. The module which 
preferably is designed so as to be robust in order 
to prevent manipulations, and which is provided 
with a suitable connector to form an electrical and 

20 mechanical connection with the device in question 
has advantageously accommodated therein an en- 
ciphering device and a random-number generator 
for the purpose of the verification procedure. This 
has the advantage that the process of enciphering 

25 cannot be influenced from outside. Enciphering can 
be used both in order to transmit the usage data 
(balances) in a secure manner, for example from 
the storage unit to a central processing device, and 
for forming, on the basis of certain data stored in 

30 the card, an authenticity code which can be used in 
said verification procedure. 

Advantageously, a device in which the method 
according to the invention is used, is suitable for 
inputting security codes for retrieving secure in- 

35 formation or inputting secret access numbers. 
Since many users find it difficult to remember 
different security codes (such as PIN codes), a 
suitable card is advantageously provided with a 
semiconductor memory for storing security codes, 

40 which memory is only accessible by inputting, via 
a devicel, a further security code. Thus it is possi- 
ble, by inputting only a single security code, to 
retrieve a number of other codes and, for example, 
make them visible on a display unit of the device in 

45 question. In so doing, use is made of the fact that 
devices of the type discussed in the above are 
generally equipped with a display unit for display- 
ing amounts to be paid, instructions for the user, 
numbers dialled (in the case of telephone sets), 

50 etc.. In combination with a suitable card which may 
for example but not necessarily, be a card for 
making payments, the reproduction of secret or 
other stored data such as security codes (PIN 
codes, Personal Identification Number Codes) is 

55 possible. The data thus reproduced may for exam- 
ple, in turn be input into the device in question for 
a further action (dialling a secret telephone number, 
obtaining a certain access privilege, enquiring for 

4 
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the balance of a particular bank account). Advanta- 
geously, a card of this type can be used for retriev- 
ing usage data from secure storage units of de- 
vices. 
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BRIEF DESCRIPTION OF THE DRAWING 

The invention will further be explained below 
with reference to the drawing, in which: 

Figure 1 shows schematically the data ex- 
change between a card, a device and a security 
module of the device. 

Figure 2 shows an embodiment of a system in 
which the invention has been implemented. 

DETAILED DESCRIPTION OF A PREFERRED EM- 
BODIMENT 

The procedure depicted schematically in Fig- 
ure 1 comprises a possible data exchange accord- 
ing to the invention between a device (e.g. a tele- 
phone set or a vending machine) and a card. The 
particular device is provided with a secure module 
for storing data. The columns I, II, and III represent 
the card, the device and the secure module, re- 
spectively. From top to bottom, the successive 
times a to i inclusive are shown. At these points in 
time, the following take place, respectively: 

a. The card has been inserted into the device. 
Thereupon, the device outputs a start instruction 
(start pulse) to the module. 

b. Between the card and the module a verifica- 
tion procedure takes place via the device (check 
of the authenticity of the card). This procedure 
involves the transmission of, inter alia, usage 
data to the device. The module stores the cur- 
rent values (usage data) for this card. 

c. During usage (telephone call, purchase trans- 
action) a lowering of a card balance takes place 
(debit charges). 

d. As for c. 

e. The verification procedure is repeated for the 
purpose of checking whether (1) the card is still 
present; (2) the card present is authentic; (3) the 
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card present is identical to the card present at 
time b. The module calculates the difference 
between the current value(s) and that (those) 
stored at b. and increments an internal counter. 
5 If one of the points (1) to (3) inclusive is not 

complied with, the transaction is discontinued. 

f. As for c. 

g. As for c. 

h. As for e. 

10 i. The transaction is completed, whereupon the 
device outputs a stop instruction (stop pulse) to 
the module. The latter may, if appropriate, up- 
date the stored data (counter contents). 
It will be clear from the above that the reliability 

76 of the data stored in the module increases as the 
verification procedure is performed more frequent- 
ly. Given the time required for the verification pro- 
cedure, the verification procedure will in general, 
however, not take place after each lowering of a 

20 card balance (as for c, d.. f. and g.). It should be 
noted that during the verification procedure, in ad- 
dition to the usage data, other data, such as a card 
identification, are likewise transmitted from the card 
to the device. This will be further explained below. 

25 The card 1 shown schematically in Figure 2 

comprises a memory 10 for storing data, which 
include usage data (such as the card balance). The 
memory 10 may be constituted by e.g. a magnetic 
strip but is preferably a semiconductor memory. 

30 The device 2 depicted schematically is provided 
with a secure module 3 in which a storage unit 
(memory) 30 is disposed. Stored in the memory 10 
there are, in addition to a card counter (count 
value), a card identification and a card key. The 

35 card key, the card counter and the card identifica- 
tion are fed to an encryptor 11 which is also fed, 
from the device 2, with a random number. From 
these data, the encryptor supplies an authenticity 
code which, like the card identification and the card 

40 counter, is transmitted to the device 2 and thence 
to the module 3. In the module 3, the card iden- 
tification and a passkey (generic key) read out from 
the storage unit (memory) 30 are fed to a unit 32 
which generates the card key therefrom. This card 

45 key is fed, like the card identification, the card 
counter and the random number mentioned earlier, 
which was generated by random number generator 
31, to an encryptor 33 which in a manner cor- 
responding to that of the encryptor 1 1 of the card 

60 1 , generates an authenticity code. This code is, like 
the code generated by the encryptor 11, fed to a 
comparator 34. If the two authenticity codes, I.e. 
the code generated by the card 1, and the code 
regenerated by the module 3. agree, the card in 

55 question is adjudged to be authentic and a cor- 
responding signal is output by the comparator 34 
to the device 2, so that the transaction (us of the 
device with the aid of the card in question) may be 
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continued. 

The verification procedure described here and 
the components required therefor serve only as an 
example: it will be understood that implementation 
of the invention can also be achieved by an alter- 5 
native verification procedure involving transmission 
of usage data from the card to the device. 

The device 2 and the module 3 shown sche- 
matically in Figure 2, can be assembled from com- 
mercially available components. Techniques for im- to 
plementing electronic circuits are described, Inter 
alia, in "The Art of Electronics" [1], which is here- 
with incorporated by reference in this text. Suitable 
cryptographic techniques may be found in "Cipher 
Systems" [2], which is also herewith incorporated 75 
by reference In this text The card 1 may e.g. be a 
suitably programmed commercially available smart 
card. At least some of the electronic components 
of the module 3 and of the card 1 may advanta- 
geously be integrated in an application specific 20 
integrated circuit (ASIC). 

It will further be understood that the device 2, 
in addition to the parts shown, comprises further 
parts (not shown) which provide for suitable func- 
tioning. Thus, the device 2 will comprise a card 25 
reader device which is preferably incorporated 
therein and into which the card 1 can be inserted 
and by means of which it is subsequently possible 
to communicate with the card. The device 2 is 
further provided with suitable means for performing 30 
a transaction, for example communication means 
for making a telephone call, dispensing means for 
dispensing a purchased product and the like. For 
the purpose of implementing the invention, a suit- 
able device which is embodied by the device 2, is 35 
at least provided with means for storing usage 
data, means for transmitting usage data from the 
card to the device, and means for deriving from the 
transmitted usage data the data which have to be 
stored. This derivation may comprise both an 4o 
arithmetic operation, for example addition or sub- 
traction, and copying of the usage data or, on the 
basis of said usage data, incrementing or de- 
crementing counter contents. Data stored in the 
storage unit may, for example, be read out via a 45 
cable link, but also by means of a suitable card 
which is provided with means for secure data stor- 
age. Security of this type is advantageously 
achieved by means of a security code for obtaining 
access to the memory of the card. so 

As has been explained above, the invention 
provides the possibility of storing, in the storage 
unit of the device, a counter value (balance value) 
which has been derived from a value which in turn 
has been transmitted, during a procedure for verify- 55 
ing the authenticity of the card, from said card to 
the device in question. This way it is assured that, 
at the same time as the authenticity check, the 



value stored in the storage unit (counter) is a 
correct representation of the value stored on the 
card. If the authenticity check is unsuccessful, in 
other words if the card is not adjudged authentic 
by the verification procedure, the counter value 
transmitted is not used. In essence, together with 
the authenticity check of the card an authenticity 
check of the counter data thus takes place. The 
authenticity check thereby acquires a supplemen- 
tary function, without the verification procedure it- 
self having to be extended for this purpose. The 
supplementary circuits required for implementing 
the method according to the invention, may there- 
fore, apart from the storage elements (counters) 
required and the circuits for effecting the verifica- 
tion procedure, comprise only means for selec- 
tively passing the balance value(s) transmitted. An 
alternative possibility is, inter alia, that of resetting, 
in response to failure of the authentication, a rela- 
tive counter, i.e. one which exclusively retains the 
last value read out. This, in principle, does not 
require supplementary circuits. 

It will be understood by those skilled in the art 
that the invention is not limited to the illustrative 
embodiments depicted above and that many modi- 
fications and additions may be made without de- 
parting from the spirit and scope of the present 
invention. 

Claims 

1. Method for securely recording usage data of a 
card operated device (2), the method compris- 
ing the steps of: 

- temporarily storing first usage data in the 
device, 

- transferring second usage data from the 
device (2) to the card (1), the second 
usage data being derived from the first 
usage data, 

- storing third usage data on the card (1), 
the third usage data being derived from 
the second usage data, 

- transferring fourth usage data from the 
card (1) to the device (2), the fourth 
usage data being derived from the third 
usage data, and 

- storing fifth usage data in a storage unit 
(3) associated with the device, the fifth 
usage data being derived from the fourth 
usage data. 

2. Method according to Claim 1, wherein the first 
and fifth usage data are identical. 

3- Method according to Claim 1 or 2. wherein the 
fifth usage data are derived from the fourth 
usage data by means of a cryptographic pro- 
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cess. 

4. Method according to Claim 1, 2 or 3. wherein 
the third usage data are derived from the sec- 
ond usage data by means of a cryptographic 
process. 

5. Method according to Claim 1, 2, 3 or 4, 
wherein the transmission of the fourth usage 
data from the card (1) to the device (2) takes 
place during a verification procedure by means 
of which the authenticity of the card (1) is 
checked, the verification procedure preferably 
taking place repeatedly during a usage of the 
device (2). 



10 



14. Module (3) for use in a device according to 
Claim 11, 12 or 13, provided with a storage 
unit for storing usage data. 

15. Card (1), in particular for use with a device (2) 
according to any of Claims 11, 12 or 13. pro- 
vided with a semiconductor memory (10) for 
storing security codes, which memory is ac- 
cessible only by inputting, via a device, a 
further security code. 



75 



Method according to Claim 5, wherein the ver- 
ification procedure comprises the determina- 
tion of an authenticity code, which determina- 
tion takes place on the basis of, inter alia, the 
fourth usage data transmitted from the card. 



20 



Method according to any of the preceding 
claims, wherein the usage data comprise a 
credit balance. 



25 



Method according to any of the preceding 
claims, wherein at least certain usage data are 
stored by means of at least one counter, the at 
least one counter preferably being non-reset- 
table. 



30 



9. Method according to Claim 8, wherein the stor- 
age unit (3), in addition to the current absolute 
value of a counter, also stores the absolute 
value of that counter during the most recent 
read-out thereof. 
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10. Method according to Claim 9, wherein the pro- 
cess of reading out from the storage unit com- 
prises forming the difference of the said values 
of the counter. 
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11. Card operated device, provided with a storage 
unit associated therewith, designed for applica- 
tion of the method according to any one of the 
preceding claims. 
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12. Device according to Claim 11, wherein the 

storage unit is accommodated in a module (3) so 
mounted detachably in the device (2), the 
module for the purpose of the verification pro- 
cedure preferably also comprising a random- 
number generator (31) and means (32, 33, 34) 
for performing the verification procedure. 55 



13. Telephone set according to Claim 11 or 12. 
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